Open-source Claude Code plugins for AI-assisted development, security, and planning
  • JavaScript 67.7%
  • HTML 22.6%
  • Shell 4.2%
  • CSS 3%
  • TypeScript 2.4%
  • Other 0.1%
Find a file
Kjell Tore Guttormsen 29229c0b01 feat(linkedin-studio): video quality gate (captions + aspect guidance, drop 9:16 mandate)
Resolve the video-advice contradiction on the two surfaces this step owns
(research/03 D1-D3):

- commands/video.md: rename the "3-Second Test" to a "Muted-Autoplay Test"
  (front-load value for ~85% muted viewing; the "three-second hook" is
  cross-platform folklore, not a LinkedIn signal); make captions the
  enforceable spec (SRT or native auto-captions, indexed for search);
  aspect ratio as guidance (4:5/1:1 preferred for broad distribution,
  9:16 opt-in for the vertical video tab, crops to 1:1 on desktop); add
  MP4-default + warn-only MOV/AVI + official upload limits to the
  pre-recording reminder.
- references/linkedin-formats.md: reframe the 9:16 "distribution boost"
  as uncorroborated heuristic; 4:5 "deprioritized" -> 4:5/1:1 preferred;
  drop the "3-second hook"; MP4 safe-default + warn-only MOV/AVI; replace
  "good video rewarded more than ever" with the honest "per-video reach
  declining; documents/carousels out-engage video."

algorithm-signals-reference.md (the canonical magnitude source) was
already reconciled in Phase 0 (line 56 reads "declining ... 4:5/1:1
preferred, captions are the enforceable spec") and carries no boost copy,
so it is intentionally untouched here — and it is not in this step's
manifest.

Verify: grep 'must be 9:16|9:16 (1080|3-second hook' video.md
linkedin-formats.md -> none; 'captions' video.md -> 5; 'deprioritized'
linkedin-formats.md -> none; structure lint 61/61.

KNOWN RESIDUAL (flagged for follow-up, NOT in this step's scope):
- references/linkedin-growth-playbook-2025-2026.md:216 still carries a
  "9:16 ... distribution boost" line. That file is owned by Step 17, but
  Step 17's changes are newsletter-distribution — the video line would
  fall through. Fold this into Step 17 or the review gate.
- references/video-strategy-guide.md:300 still says "the 3-second test
  determines 70% of retention." That file is owned by NO plan step
  (orphaned) — needs a home. Surface at session end for an operator
  decision.

Plan Step 15 (Wave 4 S2). Counts unchanged.
[skip-docs]: tre-doc + version bump deferred to Step 21 per remediation plan.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-05-30 02:37:51 +02:00
.claude-plugin refactor(linkedin)!: rename plugin linkedin-thought-leadership → linkedin-studio (v3.0.0) 2026-05-29 11:32:02 +02:00
plugins feat(linkedin-studio): video quality gate (captions + aspect guidance, drop 9:16 mandate) 2026-05-30 02:37:51 +02:00
scripts feat(marketplace): add sync-design-system.mjs script 2026-05-03 12:24:23 +02:00
shared feat(ms-ai-architect): v1.15.0 — playground v3 project-view integration 2026-05-16 20:58:51 +02:00
.gitignore chore: gitignore STATE.md (per-plugin continuity files stay local, not tracked) 2026-05-29 12:20:18 +02:00
.gitleaks.toml refactor(ms-ai-architect): playground uses vendored design-system 2026-05-03 12:35:47 +02:00
.gitleaksignore refactor(linkedin)!: rename plugin linkedin-thought-leadership → linkedin-studio (v3.0.0) 2026-05-29 11:32:02 +02:00
.mailmap Add .mailmap to consolidate author identities 2026-05-05 20:08:12 +02:00
CLAUDE.md docs(claude): retire root REMEMBER/TODO/ROADMAP, point session files at STATE.md 2026-05-30 01:24:28 +02:00
GOVERNANCE.md docs: introduce GOVERNANCE.md and unify fork-and-own blurb 2026-05-03 14:57:00 +02:00
README.md docs(readme): cut marketplace catalog to current-state, drop embedded version history 2026-05-30 01:14:02 +02:00

ktg-plugin-marketplace

Open-source Claude Code plugins for AI-assisted development, security, and planning.

Built for my own Claude Code workflow and shared openly for anyone who finds them useful. Solo-maintained, AI-assisted, fork-and-own. Issues are welcome as signals; pull requests are not accepted. See GOVERNANCE.md for what upstream provides and how this is meant to be used.

All code here is generated by Claude Code through a dialog-based process: I direct, review, test, and validate; Claude writes. Treat the plugins as AI-authored, human-curated.

Installation

claude plugin marketplace add https://git.fromaitochitta.com/open/ktg-plugin-marketplace.git

Then open Claude Code and type /plugin to browse and install. Works with the Claude Code CLI, desktop app, and IDE extensions on macOS, Linux, and Windows. No external dependencies.

Each plugin keeps its own full README and CHANGELOG; this page is just the catalog.


Plugins

LLM Security v7.7.2

Security scanning, auditing, and threat modeling for agentic AI projects. Built on OWASP LLM Top 10 (2025), OWASP Agentic AI Top 10, and Google DeepMind's AI Agent Traps taxonomy.

  • Automated enforcement — 9 hooks block prompt injection, secrets in code, destructive commands, and supply-chain risks in real time
  • Deterministic scanning — 23 Node.js scanners for entropy, Unicode codepoints, typosquatting, taint flow, git forensics, AI-BOM, and IDE-extension prescan (VS Code + JetBrains)
  • Advisory analysis — 20 commands that scan, audit, and model threats with letter-graded reports and remediation
  • Enterprise governance — EU AI Act / NIST AI RMF / ISO 42001 mapping, SARIF 2.1.0 output, policy-as-code, standalone CLI

Key commands: /security posture, /security audit, /security scan, /security ide-scan, /security threat-model

6 agents · 23 scanners · 9 hooks · 1822 tests · Full documentation →


Config-Audit v5.1.0

Configuration intelligence for Claude Code. Claude reads instructions from 7+ file types across multiple scopes; this plugin tells you what's wrong, what's missing, what's silently conflicting, what's actually loaded, and where you're burning tokens.

  • Health — 12 deterministic scanners catch broken imports, deprecated settings, conflicting rules, permission contradictions, and token waste
  • Opportunities — context-aware recommendations for Claude Code features you're not using
  • Action — auto-fix with mandatory backups, syntax validation, and rollback
  • Inventory + hotspots — read-only view of active plugins, skills, MCP servers, hooks, and CLAUDE.md cascade, plus a ranked map of token waste
  • Plain-language UX — output leads with prose and groups findings by impact and urgency (--raw and --json available)

Key commands: /config-audit posture, /config-audit feature-gap, /config-audit fix, /config-audit whats-active, /config-audit tokens

6 agents · 12 scanners · 18 commands · 792+ tests · Full documentation →


Voyage v5.1.1

A six-command planning pipeline with specialized agent swarms, adversarial review, and zero-friction multi-session resumption. Renamed from ultraplan-local//ultra*-local to avoid collision with Anthropic's /ultraplan and /ultrareview. No cloud dependency.

  • /trekbrief — capture intent through a quality-gated interview; emits a reviewable brief
  • /trekresearch — deep multi-source research with triangulation and confidence ratings
  • /trekplan — transform the brief into an executable, manifest-verified plan
  • /trekexecute — disciplined execution with independent audit and bounded failure recovery
  • /trekreview — independent post-hoc review; severity-tagged findings feed back into planning
  • /trekcontinue — resume the next session from saved state in one command

Per-phase effort and model dialog; /trekbrief, /trekplan, and /trekreview render an operator-annotation HTML view you can mark up and copy back into Claude.

23 agents · 6 commands (+1 helper) · 5 hooks · 500+ tests · Full documentation → · Migration guide


AI Psychosis v1.2.0

Meta-awareness tools that counteract sycophancy, reinforcement loops, and compulsive AI interaction patterns. AI assistants are structurally optimized to be agreeable; this surfaces when that becomes a problem.

  • Behavioral instructions — rules that modify Claude's behavior: no unearned affirmations, mandatory risk identification, pattern naming
  • Programmatic detection — 4 hooks measure session duration, dependency language, rapid-fire bursts, edit ratios, and late-night usage, with progressive alerts
  • Interaction reports/interaction-report for aggregated session statistics (opt-in)
  • Contemplative references — optional pointers when interaction flags are elevated (opt-in)

Research-informed thresholds. Alerts are progressive and never blocking. Privacy-first: prompt text is never logged.

1 skill · 1 command · 4 hooks · Full documentation →


Graceful Handoff v2.1.0

Auto-trigger session handoff at context threshold, so summarizing state, committing work, and writing a continuation prompt don't get rushed when you run low. Manual /graceful-handoff always works as backup. Built for Opus 4.7.

  • Auto-trigger via Stop hook — at ~70% context, writes the handoff artifact and commits (push stays manual; irreversible operations remain user-triggered)
  • Model-aware context detection — a 4-step fallback chain so Opus 4.7's 1M window fires at the right moment, not 57× too early
  • statusLine hint + SessionStart auto-load — display-only warnings at 60%/70%, then injects the handoff into the resumed session
  • Deterministic JSON pipeline — runs without an LLM, stages only the artifact (never git add -A), under a 60s budget

Key command: /graceful-handoff [topic-slug] [--no-commit] [--no-push] [--dry-run]

3 hooks · 1 skill · 1 pipeline · 57 tests · Full documentation →


MS AI Architect v1.15.0 🇳🇴 Norwegian

Microsoft AI solution architecture guidance for Norwegian public sector and enterprise, through Cosmo Skyberg — a structured architect persona who understands the problem before recommending technology.

  • Structured advisory — 7-phase methodology from business need to architecture recommendation and optional diagram
  • Regulatory assessments — ROS (NS 5814), DPIA/PVK, 6×5 security scoring, EU AI Act classification, cost in NOK (P10/P50/P90)
  • Norwegian public sector — Digdir architecture principles, Utredningsinstruksen, NSM, Schrems II data residency, EU AI Act workflow
  • Grounded and current — 387 reference documents, verified against live Microsoft Learn via MCP; /architect:kb-update refreshes the knowledge base
  • Playground — single-file decision-builder and report viewer covering all 17 report types, light/dark, runs offline

Key commands: /architect, /architect:ros, /architect:security, /architect:dpia, /architect:utredning, /architect:cost

12 agents · 25 commands · 5 skills (387 docs) · 2 hooks · Full documentation →


LinkedIn Studio v3.1.0

Build authentic LinkedIn authority through algorithmic understanding, strategic consistency, and AI-assisted content creation.

  • Long-form newsletter pipeline — a multi-phase orchestrator (research → skeleton → prose → de-AI/voice scrub → fact-check → editorial and persona gates → visual assets → lock → delivery) with maintained edition state
  • Adversarial review — cold headless content, language, and fact reviewers re-check a frozen draft with no drafting-session context; /linkedin:pivot re-opens cleared gates on major rewrites
  • Content engine — Content Matrix (40+ ideas from one topic), voice training with drift detection, full ideation → publish → 48-hour monitoring → analytics
  • Growth and monetization — phase-specific guidance from 0 to 10K+ followers; 360Brew profile optimization for LinkedIn's creator validation

Key commands: /linkedin:onboarding, /linkedin:post, /linkedin:quick, /linkedin:newsletter, /linkedin:carousel, /linkedin:report

19 agents · 26 commands · 6 skills · 9 hooks · Full documentation →


OKR for Public Sector v1.3.0 🇳🇴 Norwegian

Turn strategy into measurable goals. An AI coach that learns your organization once, then builds on that knowledge so you spend time on strategy, not re-explaining context.

  • Strategy to OKR — transform goals from virksomhetsplan or tildelingsbrev into well-structured OKR with quality checks and alignment scoring
  • Gap analysis/okr:gap compares strategy documents against current OKR: what's covered, what's missing, what to do
  • Cross-cycle learning/okr:analyse tracks score trends and recurring antipatterns across cycles with charts
  • 19 antipattern detection — catches sandbagging, activity-disguised-as-KR, set-and-forget, and 16 more
  • Built for norsk offentlig sektor — 4-month tertials, DFO terminology, tillitsvalgt involvement, Riksrevisjon-ready documentation

Key commands: /okr:skriv, /okr:kvalitet, /okr:gap, /okr:analyse, /okr:kaskade, /okr:governance

7 agents · 10 commands · 4 hooks · Full documentation →


Human-Friendly Style v1.1.0

A shared Claude Code output style used across this marketplace, so the conversation feels like dialog rather than a console dump.

  • Explains what and why, not how — reserving technical detail for when you ask
  • Hides noise by default — long paths, raw commands, JSON, and stack traces are summarized
  • Always shows irreversible actions verbatim — deploys, deletes, force-push, migrations
  • Matches your language (Norwegian or English) and is honest about uncertainty

Optional and works alongside every other plugin. Activate with /config → Output style → Human-Friendly.

1 output style · Full documentation →


Claude Design v0.1.0

End-to-end facilitator for prompting Claude Design (claude.ai/design). Walks you from raw idea through prompt drafting, delivery, and iteration coaching. The output is the prompt; the artifact gets built in Claude Design.

  • Eight-phase flow — disambiguate → intent preset → audience and destination → DESIGN.md anchor → five-layer prompt → delivery → iteration coaching → ship-readiness
  • Evidence-graded references — five foundation plus eight per-preset references, each carrying an Anthropic-domain citation
  • Complements Anthropic's official design plugin — this covers idea → prompt → iterate; theirs covers critique → handoff, with zero command overlap (enforced by test)

1 skill · 13 reference files · 5 tests · Full documentation →


Shared infrastructure

Playground Design System v0.1

Shared design system for plugin Playgrounds — the visual self-service UIs that complement terminal slash-commands. Aksel/Digdir-aligned, WCAG 2.1 AA, light + dark themes, print-ready. Used by ms-ai-architect, okr, llm-security, voyage, and config-audit.

  • Tokens and components — self-hosted fonts (OFL 1.1), a deuteranopia-safe severity ramp, and Tier 13 components: radar, matrix-heatmap, findings-browser, AI Act pyramid and timeline, maturity-ladder, and more
  • Privacy-first — all fonts self-hosted, zero CDN requests, works offline and behind air-gapped firewalls
  • Vendoring syncscripts/sync-design-system.mjs <plugin> keeps each plugin standalone; a SHA-256 manifest detects local drift

Full documentation → · Browse showcase


License

MIT